Lexmark EmbeddedWebServer AdminGuide en
Lexmark EmbeddedWebServer AdminGuide en
Administrator's Guide
Contents
Change history.............................................................................................. 4
Overview........................................................................................................ 6
Supported printer models................................................................................................................................. 6
Supported web browsers.................................................................................................................................. 9
Accessing the Embedded Web Server.......................................................................................................... 9
Parts of the Embedded Web Server..............................................................................................................10
Understanding helper text................................................................................................................................ 11
Managing printers....................................................................................... 12
Checking the status of parts and supplies from the Embedded Web Server.................................... 12
Generating reports and logs........................................................................................................................... 12
Configuring supply notifications.....................................................................................................................13
Customizing the home screen........................................................................................................................ 13
Managing contacts.............................................................................................................................................15
Scanning.......................................................................................................16
Configuring the scan settings......................................................................................................................... 16
Creating a shortcut........................................................................................................................................... 25
Managing Scan Center destinations............................................................................................................ 25
Faxing...........................................................................................................28
Configuring the fax settings........................................................................................................................... 28
Networking.................................................................................................. 34
Configuring the HTTP/FTP Settings............................................................................................................. 34
Selecting the active network adapter.......................................................................................................... 34
Connecting to a wireless network................................................................................................................ 35
Securing printers........................................................................................ 36
Securing network connections...................................................................................................................... 36
Managing devices remotely........................................................................................................................... 38
Managing login methods..................................................................................................................................41
Managing certificates.......................................................................................................................................52
Managing other access functions................................................................................................................. 54
Contents 3
Securing data......................................................................................................................................................57
Troubleshooting..........................................................................................62
Login troubleshooting......................................................................................................................................62
LDAP troubleshooting...................................................................................................................................... 63
Scanning problems........................................................................................................................................... 64
Faxing problems................................................................................................................................................65
Networking problems.......................................................................................................................................68
Notices......................................................................................................... 69
Index............................................................................................................. 74
Change history 4
Change history
January 2023
• Added information on the following:
– Supported printer models
– Scan, fax, network, and security settings
– Managing printers
May 2022
• Added information on home screen customization.
April 2020
• Added information on the following:
– Supported printer models
– Scan, fax, network, and security settings
– Managing printers
February 2019
• Added information on the following:
– Supported printer models
– Scan, fax, and network settings
– Creating a shortcut
• Added instructions on configuring printer settings.
October 2018
• Added information on the following:
– Supported printer models
– Scan, fax, and network settings
April 2018
• Added information on supported printer models and web browsers.
August 2017
• Added information on supported printer models.
June 2017
• Added information on supported printer models.
February 2017
• Added information on supported printer models.
Change history 5
January 2017
• Updated information on the Common Criteria certified target of evaluation.
July 2016
• Added information on the following:
– New and updated access controls
– New LDAP attribute settings
January 2016
• Initial document release for multifunction products with a tablet-like touch‑screen display.
Overview 6
Overview
Use this document to manage and configure printer, scan, fax, network and security settings using the
Embedded Web Server. To secure the printer, combine login methods and access controls to define users who
are allowed to use the printer, and the functions they can use.
Using the Embedded Web Server, you can configure the Lexmark printer to conform to the Common Criteria
certified target of evaluation. For more information, see the Lexmark Common Criteria Installation Supplement
and Administrator Guide.
Before you begin, make sure that the printer settings have been configured for e‑mail. For more information,
see the printer User’s Guide.
Also, identify the following conditions:
• The login method to use
– Local accounts—Use the authentication methods available on the printer. User credentials are stored
in the printer memory.
– Lightweight Directory Access Protocol (LDAP)
– Generic Security Services Application Program Interface (LDAP+GSSAPI)
– Kerberos
– Active Directory
• Other solutions that you want to include
– Smart Card Authentication—A collection of applications used to secure access to printers and their
functions. The applications let you log in to a printer manually or using a smart card, and then securely
send e-mails and release print jobs. You can also configure more security settings in an application, such
as e-mail signing and encryption.
– Card Authentication—Secure access to a printer using a card reader. When users badge in, their
credentials are authenticated using a master printer, LDAP, Lexmark Document Distributor (LDD), or
identity service providers (ISP).
Note: For more information, see the Administrator’s Guide for the solution.
• The group where the users belong to. You can create groups after creating the login methods.
• The applications, functions, and printer management settings that users can access.
You may need administrative rights to configure or troubleshoot the security settings.
• Lexmark CX635
• Lexmark CX725
• Lexmark CX727
• Lexmark CX820
• Lexmark CX825
• Lexmark CX827
• Lexmark CX860
• Lexmark CX920
• Lexmark CX921
• Lexmark CX922
• Lexmark CX923
• Lexmark CX924
• Lexmark MB2236
• Lexmark MB2338
• Lexmark MB2442
• Lexmark MB2546
• Lexmark MB2650
• Lexmark MB2770
• Lexmark MB3442
• Lexmark MC2325
• Lexmark MC2425
• Lexmark MC2640
• Lexmark MC3224
• Lexmark MC3326
• Lexmark MC3426
• Lexmark MX321
• Lexmark MX331
• Lexmark MX421
• Lexmark MX431
• Lexmark MX521
• Lexmark MX522
• Lexmark MX532
• Lexmark MX622
• Lexmark MX632
• Lexmark MX721
• Lexmark MX722
• Lexmark MX725
• Lexmark MX822
• Lexmark MX826
• Lexmark XC2235
• Lexmark XC2240
Overview 8
• Lexmark XC2335
• Lexmark XC4140
• Lexmark XC4150
• Lexmark XC4240
• Lexmark XC6152
• Lexmark XC8155
• Lexmark XC8160
• Lexmark XM3350
• Lexmark XM5365
• Lexmark XM5370
• Lexmark XM7355
• Lexmark XM7370
Printers
• Lexmark B2236
• Lexmark B2338
• Lexmark B2442
• Lexmark B2546
• Lexmark B2650
• Lexmark B2865
• Lexmark B3340
• Lexmark B3442
• Lexmark C2240
• Lexmark C2325
• Lexmark C2335
• Lexmark C2425
• Lexmark C2535
• Lexmark C3224
• Lexmark C3326
• Lexmark C4150
• Lexmark C6160
• Lexmark CS331
• Lexmark CS421
• Lexmark CS431
• Lexmark CS521
• Lexmark CS531
• Lexmark CS622
• Lexmark CS632
• Lexmark CS639
• Lexmark CS720
• Lexmark CS725
Overview 9
• Lexmark CS727
• Lexmark CS728
• Lexmark CS820
• Lexmark CS827
• Lexmark CS921
• Lexmark CS923
• Lexmark CS927
• Lexmark M3350
• Lexmark M5255
• Lexmark M5270
• Lexmark M5275
• Lexmark MS321
• Lexmark MS331
• Lexmark MS421
• Lexmark MS431
• Lexmark MS521
• Lexmark MS621
• Lexmark MS631
• Lexmark MS622
• Lexmark MS632
• Lexmark MS725
• Lexmark MS821
• Lexmark MS822
• Lexmark MS823
• Lexmark MS825
• Lexmark MS826
Section Description
1 Top • Shows the printer information and current status.
• Allows the user to change the language of the web page.
Note: Changing the language of the web page does not affect the language on the printer
display.
2 Left • Allows the user to search for items in the Embedded Web Server.
• Contains links to the printer settings and other major sections of the Embedded Web Server.
3 Center • Shows specific information on the selected section of the web page.
• Allows the user to change configurations and settings.
• Generates reports and logs. For more information, see “Generating reports and logs” on
page 12.
Overview 11
Managing printers
Checking the status of parts and supplies from the
Embedded Web Server
Note: Make sure that the computer and printer are connected to the same network.
1 Obtain the printer IP address. Do either of the following:
• Locate the IP address on the printer home screen.
• View the IP address in the Network Overview section or in the TCP/IP section of the Network/Ports menu.
2 Open a web browser, and then type the printer IP address.
3 You can view the status of the parts and supplies in the Supplies section.
• Network
– Network Setup Page—Show the configured network and wireless settings on the printer.
Note: This report is available only in network printers and printers connected to print servers.
– Wi‑Fi Direct Connected Clients—Show the list of devices that are connected to the printer using Wi-
Fi Direct®.
Note: This report appears only when Enable Wi‑Fi Direct is set to On.
Notes:
• Click Remove to remove the application from the list.
• The edit option is disabled for BLANK SPACE and eSF applications.
Notes:
• You can limit the applications to show on a particular page.
• If the number of applications on a particular page reaches the limit, the add icon for that page is
disabled.
Notes:
• Page 1 represents the first page of the home screen, while Other Pages represents the subsequent
pages of the home screen. You can drag and drop applications to and from Page 1 to Other Pages.
• You can rearrange the order of applications for Page 1, but not for Other Pages.
• You cannot drag and drop any applications on a page which has reached the limit for the number of
applications.
• If only one application remains, then you cannot drag an application out of that page.
Managing contacts
Adding contacts
Note: This setting is available only in some printer models.
1 From the Embedded Web Server, click Address Book.
2 From the Contacts section, click Add Contact.
Note: You can assign the contact to one or more groups.
3 If necessary, specify a login method to allow application access.
4 Click Save.
Adding groups
Note: This setting is available only in some printer models.
1 From the Embedded Web Server, click Address Book.
2 From the Contact Groups section, add a group name.
Note: You can assign one or more contacts to the group.
3 Click Save.
Scanning
Configuring the scan settings
Copy Defaults
• Content Type—Improve the output result based on the content of the original document.
• Content Source—Improve the output result based on the source of the original document.
• Sides—Specify the scanning behavior based on the original document.
• Separator Sheets—Specify whether to insert blank separator sheets when printing.
• Separator Sheet Source—Specify the paper source for the separator sheet.
• Color—Specify whether to print copies in color.
• Pages per Side—Specify the number of page images to print on one side of a sheet of paper.
• Print Page Borders—Place a border around each image when printing multiple pages on a single page.
• Collate—Print multiple copies in sequence.
• “Copy from” Size—Set the paper size of the original document.
• “Copy to” Source—Specify the paper source for the copy job.
• Temperature—Specify whether to generate a cooler or warmer output.
• Darkness—Adjust the darkness of the scanned image.
• Number of Copies—Specify the number of copies.
• Header/Footer—Specify the header and footer of the document.
– Left Header—Specify whether to insert text on the left header of the document.
– Middle Header—Specify whether to insert text on the middle header of the document.
– Right Header—Specify whether to insert text on the right header of the document.
– Left Footer—Specify whether to insert text on the left footer of the document.
– Middle Footer—Specify whether to insert text on the middle footer of the document.
– Right Footer—Specify whether to insert text on the right footer of the document.
• Overlay—Specify the overlay text printed on each page of the copy job.
• Custom Overlay—Type a custom overlay text.
Advanced Imaging
• Color Balance—Adjust the amount of toner being used in each color.
• Color Dropout—Specify which color to drop during scanning, and adjust the dropout setting for that
color.
• Auto Color Detect—Set the amount of color that the printer detects from the original document.
• Contrast—Specify the contrast of the output.
Scanning 17
Admin Controls
• Allow Color Copies—Print copies in color.
• Allow Priority Copies—Interrupt a print job to copy a page or document.
• Custom Job Scanning—Turn on scanning of custom jobs by default.
• Allow Save as Shortcut—Save custom copy settings as shortcuts.
• Adjust ADF Skew—Adjust the front‑side and back‑side skew angles.
Note: Adjust ADF Skew is disabled if Express Mode (Express Scanning or Express Printing) is on and if
electronic deskew is not supported on the device.
• Sample Copy—Print a sample copy.
3 Click Save.
E‑mail Setup
• Primary SMTP Gateway—Type the IP address or host name of the primary SMTP server for sending e-
mail.
• Primary SMTP Gateway Port—Enter the port number of the primary SMTP server.
• Secondary SMTP Gateway—Type the server IP address or host name of your secondary or backup
SMTP server.
• Secondary SMTP Gateway Port—Enter the server port number of your secondary or backup SMTP
server.
• SMTP Timeout—Set the time before the printer times out when the SMTP server does not respond.
• Reply Address—Specify a reply address in the e‑mail.
• Always use SMTP default Reply Address—Always use the default reply address in the SMTP server.
• Use SSL/TLS—Specify whether to send e‑mail using an encrypted link.
• Require Trusted Certificate—Require a trusted certificate when accessing the SMTP server.
• SMTP Server Authentication—Set the authentication type for the SMTP server.
• Device‑Initiated E‑mail—Specify whether credentials are required for device‑initiated e‑mail.
• User‑Initiated E‑mail—Specify whether credentials are required for user‑initiated e‑mail.
• Use Active Directory Device Credentials—Enable user credentials and group designations to connect
to the SMTP server.
• Device Userid—Specify the user ID to connect to the SMTP server.
• Device Password—Specify the password to connect to the SMTP server.
• Kerberos 5 REALM—Specify the realm for the Kerberos 5 authentication protocol.
• NTLM Domain—Specify the domain name for the NTLM security protocol.
• Disable "SMTP server not set up" error—Disable the SMPT server not set up error message.
• SMPT Connection Log—Select to view the SMPT connection log details.
• Test Connection—Configure the settings for test connection.
– Recipient E-mail Address—Type the e‑mail address of the recipient.
– Send Test E-mail to Recipient—Send test e‑mail to the recipient e‑mail address.
– Test—Select to send the test e‑mail.
Note: This option is enabled after entering a valid address in the Recipient E‑mail Address field.
Note: When SMTP Server is not configured, the settings under the Setup E‑mail Lists and Alerts section
are disabled.
E‑mail Defaults
• Subject—Specify the e‑mail subject.
• Message—Specify the e‑mail message.
• File Name—Specify the file name for the scanned image.
• Format—Specify the file format for the scanned image.
• Global OCR Settings—Configure the settings for optical character recognition (OCR).
• PDF Settings—Set the PDF format of the scanned image.
– PDF Version—Specify the PDF version of the scanned image.
– Archival Version—Specify the Archival Version of the scanned image.
– Highly Compressed—Specify whether to compress the scanned image.
Scanning 19
Advanced Imaging
• Color Balance—Adjust the amount of toner being used in each color.
• Color Dropout—Specify which color to drop during scanning, and adjust the dropout setting for that
color.
• Auto Color Detect—Set the amount of color that the printer detects from the original document.
– Color Sensitivity—Specify the color sensitivity when scanning the original document.
– Area Sensitivity—Specify the area sensitivity when scanning the original document.
– E‑mail Bit Depth—Specify the bit depth to use for images detected as mono when the Color setting
is set to Auto.
– Minimum Scan Resolution—Set the minimum resolution for images detected as mono when the
Color setting is set to Auto.
• JPEG Quality—Set the quality of a JPEG‑format scanned image.
• Contrast—Specify the contrast of the output.
• Background Removal—Adjust the amount of background visible on a scanned image.
– Background Detection—Specify the background detection.
– Level—Specify the background removal level.
• Mirror Image—Create a mirror image of the original document.
• Negative Image—Create a negative image of the original document.
• Shadow Detail—Adjust the amount of shadow detail visible on a scanned image.
• Scan Edge to Edge—Allow edge‑to‑edge scanning of the original document.
• Sharpness—Adjust the sharpness of a scanned image.
• Temperature—Specify whether to generate a cooler or warmer output.
• Blank Pages—Specify whether to include blank pages.
– Blank Page Removal—Specify whether to remove blank pages.
– Blank Page Sensitivity—Specify the sensitivity of detecting blank pages.
Admin Controls
• Max E‑mail Size—Set the allowable file size for each e‑mail.
• Size Error Message—Specify an error message that the printer sends when an e‑mail exceeds its
allowable file size.
• Limit Destinations—Limit sending of e‑mail only to the specified list of domain names.
Scanning 20
FTP Defaults
• Format—Specify the file format for the scanned image.
• Global OCR Settings—Configure the settings for optical character recognition (OCR).
• PDF Settings—Set the PDF format of the scanned image.
– PDF Version—Specify the PDF version of the scanned image.
– Archival Version—Specify the Archival Version of the scanned image.
– Highly Compressed—Specify whether to compress the scanned image.
– Secure—Specify whether to enable security for the scanned image.
– Searchable—Specify whether to enable searchability for the scanned image.
– Archival (PDF/A)—Specify whether to enable archival for the scanned image.
• Content Type—Specify the content type of the original document.
• Content Source—Specify the source of the original document.
• Color—Specify the color when scanning an image.
• Resolution—Set the resolution of the scanned image.
• Darkness—Adjust the darkness of the scanned image.
• Orientation—Specify the orientation of text and graphics on the page.
• Original Size—Set the paper size of the original document.
• Sides—Specify the page orientation of text and graphics when scanning a two‑sided document.
• File Name—Specify the file name for the scanned image.
Advanced Imaging
• Color Balance—Adjust the amount of toner being used in each color.
• Color Dropout—Specify which color to drop during scanning, and adjust the dropout setting for that
color.
• Auto Color Detect—Set the amount of color that the printer detects from the original document.
– Color Sensitivity—Specify the color sensitivity when scanning the original document.
– Area Sensitivity—Specify the area sensitivity when scanning the original document.
– Scan Bit Depth—Specify the bit depth to use for images detected as mono when the Color setting
is set to Auto.
– Minimum Scan Resolution—Set the minimum resolution for images detected as mono when the
Color setting is set to Auto.
• JPEG Quality—Set the quality of a JPEG‑format scanned image.
• Contrast—Specify the contrast of the output.
• Background Removal—Adjust the amount of background visible on a scanned image.
– Background Detection—Specify the background detection.
– Level—Specify the background removal level.
• Mirror Image—Create a mirror image of the original document.
Scanning 22
Admin Controls
• Text Default—Set the quality of text on a scanned image.
• Text/Photo Default—Set the quality of text or photo on a scanned image.
• Photo Default—Set the quality of a photo on a scanned image.
• Use Multi‑Page TIFF—Choose between single- and multiple‑page TIFF files.
• TIFF Compression—Set a compression option for TIFF files.
• Transmission Log—Print a log for successful FTP scan transmission.
• Log Paper Source—Specify the paper source for printing FTP logs.
• Custom Job Scanning—Turn on scanning of custom jobs by default.
• Scan Preview—Show the scan preview on the display.
• Adjust ADF Skew—Adjust the front‑side and back‑side skew angles.
Note: Adjust ADF Skew is disabled if Express Mode (Express Scanning or Express Printing) is on and if
electronic deskew is not supported on the device.
• Allow Save as Shortcut—Save custom FTP settings as shortcuts.
• Use Passive FTP —Select to specify the data port that the printer connects to.
3 Click Save.
Advanced Imaging
• Color Balance—Adjust the amount of toner being used in each color.
• Color Dropout—Specify which color to drop during scanning, and adjust the dropout setting for that
color.
• Auto Color Detect—Set the amount of color that the printer detects from the original document.
– Color Sensitivity—Specify the color sensitivity when scanning the original document.
– Area Sensitivity—Specify the area sensitivity when scanning the original document.
– FTP Bit Depth—Specify the bit depth to use for images detected as mono when the Color setting is
set to Auto.
– Minimum Scan Resolution—Set the minimum resolution for images detected as mono when the
Color setting is set to Auto.
• JPEG Quality—Set the quality of a JPEG‑format scanned image.
• Contrast—Specify the contrast of the output.
• Background Removal—Adjust the amount of background visible on a scanned image.
– Background Detection—Specify the background detection.
– Level—Specify the background removal level.
• Mirror Image—Create a mirror image of the original document.
• Negative Image—Create a negative image of the original document.
• Shadow Detail—Adjust the amount of shadow detail visible on a scanned image.
• Scan Edge to Edge—Allow edge‑to‑edge scanning of the original document.
• Sharpness—Adjust the sharpness of a scanned image.
• Temperature—Specify whether to generate a cooler or warmer output.
Scanning 24
Admin Controls
• Text Default—Set the quality of text on a scanned image.
• Text/Photo Default—Set the quality of text or photo on a scanned image.
• Photo Default—Set the quality of a photo on a scanned image.
• Use Multi‑Page TIFF—Choose between single- and multiple‑page TIFF files.
• TIFF Compression—Set a compression option for TIFF files.
• Custom Job Scanning—Turn on scanning of custom jobs by default.
• Scan Preview—Show the scan preview on the display.
• Adjust ADF Skew—Adjust the front‑side and back‑side skew angles.
Note: Adjust ADF Skew is disabled if Express Mode (Express Scanning or Express Printing) is on and if
electronic deskew is not supported on the device.
Creating a shortcut
Note: You may need administrative rights to create a shortcut.
1 From the Embedded Web Server, click Shortcuts > Add Shortcut.
2 Select a shortcut type, and then configure the settings.
3 Click Save.
Notes:
• To use the home directory attribute in the Folder Address field, type % before and after the attribute. For
example, %customAttribute%. You can also use other LDAP attributes such
as %cn%, %sAMAccountName%, and %userPrincipalName%.
• To edit a destination, select it from the list.
• To delete a destination, click beside it.
Scanning 26
• You can also prevent users from creating or editing destinations using the printer control panel.
Notes:
• To edit a destination, select it from the list.
• To delete a destination, click beside it.
• You can also prevent users from creating or editing destinations using the printer control panel.
Notes:
• To edit a destination, select it from the list.
• To delete a destination, click beside it.
• You can also prevent users from creating or editing destinations using the printer control panel.
Notes:
• To edit a destination, select it from the list.
• To delete a destination, click beside it.
• You can also prevent users from creating or editing destinations using the printer control panel.
Faxing 28
Faxing
Configuring the fax settings
Advanced Imaging
• Color Balance—Adjust the amount of toner being used in each color.
• Color Dropout—Specify which color to drop during scanning, and adjust the dropout setting for that
color.
• Contrast—Specify the contrast of the output.
• Background Removal—Adjust the amount of background visible on a scanned image.
– Background Detection—Specify the background detection.
– Level—Specify the background removal level.
• Mirror Image—Create a mirror image of the original document.
• Negative Image—Create a negative image of the original document.
• Shadow Detail—Adjust the amount of shadow detail visible on a scanned image.
• Scan Edge to Edge—Allow edge‑to‑edge scanning of the original document.
• Sharpness—Adjust the sharpness of a scanned image.
• Temperature—Specify whether to generate a cooler or warmer output.
Admin Controls
• Automatic Redial—Adjust the number of redial attempts based on the activity levels of recipient fax
machines.
• Redial Frequency—Increase the time between redial attempts to increase the chance of sending fax
successfully.
• Enable ECM—Activate Error Correction Mode (ECM) for fax jobs.
• Enable Fax Scans—Fax documents that are scanned at the printer.
• Driver to Fax—Allow the print driver to send fax.
• Allow Save as Shortcut—Save fax numbers as shortcuts in the printer.
• Max Speed—Set the maximum speed for sending fax.
• Custom Job Scanning—Turn on scanning of custom jobs by default.
• Scan Preview—Show a preview of the scan on the display.
Faxing 30
Holding Faxes
• Held Fax Mode—Hold received faxes from printing until they are released.
Admin Controls
• Enable Fax Receive—Set the printer to receive fax.
• Enable Color Fax Receive—Set the printer to receive fax in color.
• Enable Caller ID—Show the number that is sending the incoming fax.
• Block No Name Fax—Block incoming faxes sent from devices with no station ID or fax ID specified.
• Banned Fax List—Specify the phone numbers that you want to block.
• Answer On—Set a distinctive ring pattern for incoming fax.
• Manual Answer Code—Set the answer code for incoming manual fax.
Note: Manual Answer Code is tied up to Manual Fax support.
• Auto Answer—Set the printer to receive fax automatically.
• Fax Forwarding—Specify how to forward received fax.
• Forward to—Specify where to forward received fax.
Faxing 31
Speaker Settings
1 From the Embedded Web Server, click Settings > Fax > Fax Setup > Speaker Settings.
2 Configure the settings.
• Speaker Mode—Set the fax speaker mode.
• Speaker Volume—Adjust the fax speaker volume.
• Ringer Volume—Enable the ringer volume.
3 Click Save.
• Use Active Directory Device Credentials—Enable user credentials and group designations to connect
to the SMTP server.
• Device Userid—Specify the user ID to connect to the SMTP server.
• Device Password—Specify the password to connect to the SMTP server.
• Kerberos 5 REALM—Specify the realm for the Kerberos 5 authentication protocol.
• NTLM Domain—Specify the domain name for the NTLM security protocol.
• Disable "SMTP server not set up" error—Disable the “SMPT server not set up” error message.
• Test Connection—Configure the settings for test connection.
– Recipient E-mail Address—Type the e‑mail address of the recipient.
– Send Test E-mail to Recipient—Send a test e‑mail to the recipient e‑mail address.
– Test—Select to send the test e‑mail.
Note: This option is enabled after you enter a valid address in the Recipient E‑mail Address field.
3 Click Save.
Networking
Configuring the HTTP/FTP Settings
Note: These settings are available only in network printers or printers connected to print servers.
1 From the Embedded Web Server, click Settings > Network/Ports > HTTP/FTP Settings.
2 Configure the settings.
Proxy
• HTTP Proxy IP Address—Configure the HTTP server settings.
• HTTP Default IP Port—The factory default port for HTTP is 80.
• FTP Proxy IP Address—Configure the FTP server settings.
• FTP Default IP Port—The factory default port for FTP is 21.
• Authentication—Specify the authentication credentials.
• User Name—Specify the unique user name.
• Password—Specify the unique password.
• Local Domains—Specify domain names for HTTP and FTP servers.
Other Settings
• Enable HTTP Server—Access the Embedded Web Server to monitor and manage the printer.
• Enable HTTPS—Configure the HyperText Transfer Protocol Secure (HTTPS) settings.
• Force HTTPS Connections—Force the printer to use the HTTPS connections.
• Enable FTP/TFTP—Send files using FTP.
• HTTPS Device Certificate
• Timeout for HTTP/FTP Requests—Specify the time before the server connection stops.
• Retries for HTTP/FTP Requests—Set the number of retries to connect to the HTTP/FTP server.
3 Click Save.
3 Click Save.
Securing printers
Note: For information on the latest security advisories for Lexmark products, go to
http://support.lexmark.com/alerts.
Notes:
• If no CA certificates are added, then the default certificate is used.
• If you are using PSK authentication, then type the corresponding key. Retain the key to use later when
configuring client printers.
Notes:
• If using digital certificates to establish a secure connection to the authentication server, then configure
the certificates on the printer before changing 802.1x authentication settings. For more information, see
“Managing certificates” on page 52.
• Make sure that all printers on the same network using 802.1x are supporting the same EAP
authentication type.
1 From the Embedded Web Server, click Settings > Network/Ports > 802.1x.
2 From the 802.1x Authentication section, do the following:
a Select Active.
b Type the login name and password that the printer uses to log in to the authentication server.
c Select Validate Server Certificate.
Note: Server certificate validation is necessary when using Transport Layer Security (TLS), Protected
Extensible Authentication Protocol (PEAP), and Tunneled Transport Security Layer (TTLS).
d Select Enable Event Logging.
Warning—Potential Damage: To reduce flash part wear, use this feature only when necessary.
e In the 802.1x Device Certificate list, select the digital certificate that you want to use.
Note: If only one certificate is installed, then default is the only option that appears.
3 From the Allowable Authentication Mechanisms section, select one or more authentication protocols.
• EAP‑MD5, EAP‑MSCHAPv2, LEAP, and PEAP require a login name and password.
• EAP‑TLS requires a login name, CA certificate, and signed printer certificate.
• EAP‑TTLS requires a login name and password and CA certificate.
Securing printers 38
4 In the TTLS Authentication Method menu, select the authentication method to use.
5 Click Save.
Setting up SNMP
• Remote Syslog Facility—Select a facility code for events logged to the destination server. All events
sent from the device are tagged with the same code to aid in sorting and filtering by network monitor
or intrusion detection software.
• Severity of Events to Log—Select the priority level cutoff for logging messages and events. The
highest severity is 0, and the lowest is 7. The selected severity level and anything higher are logged.
For example, if you select 4 ‑ Warning, then severity levels 0–4 are logged.
• Remote Syslog Non‑Logged Events—Send all events regardless of severity to the remote server.
Updating firmware
Printers inspect all downloaded firmware packages for required attributes before adopting and executing the
packages. The firmware is packaged in a proprietary format and encrypted with a symmetric encryption
algorithm through an embedded key that is known only to Lexmark. However, the strongest security measure
comes from requiring all firmware packages to include multiple digital 2048-bit RSA signatures from Lexmark.
If these signatures are not valid, or if the message logs indicate a change in firmware after the signatures were
applied, then the firmware is discarded.
1 From the Embedded Web Server, click Settings > Device > Update Firmware.
2 Do either of the following:
• Browse to the firmware file, and then click Upload.
• Click Check for updates now > I agree, start update.
Securing printers 41
Notes:
• To import access controls from another group, click Import Access Controls, and then select a group.
• For more information on access controls, see “Understanding access controls” on page 50.
Notes:
• LDAP+GSSAPI requires a Kerberos network account. For more information, see “Creating a Kerberos
login method” on page 45.
• Supported printers can store a maximum of eight unique LDAP or LDAP+GSSAPI login methods. Each
method must have a unique name.
• Administrators can create up to 32 user‑defined groups that apply to each unique login method.
• LDAP and LDAP+GSSAPI relies on an external server for authentication. If the server is down, then users
are not able to access the printer using LDAP or LDAP+GSSAPI.
• To help prevent unauthorized access, log out from the printer after each session.
Device Credentials
• Anonymous LDAP Bind—Bind the printer with the LDAP server anonymously. This option is applicable
only if your LDAP server allows anonymous binding. Enabling this option does not require you to provide
authentication credentials. This option is available only in the LDAP setup.
• Use Active Directory Device Credentials—Use user credentials and group designations that are pulled
from the existing network comparable to other network services. This option is available only in the LDAP
+GSSAPI setup.
Securing printers 44
• If Anonymous LDAP Bind or Use Active Directory Device Credentials is disabled, then provide the
authentication credentials used to bind the printer with the LDAP server.
– Device Username
• For LDAP setup, type the fully qualified distinguished name (DN) of a user registered to the LDAP
server.
• For LDAP+GSSAPI setup, type the DN of a user registered to the Kerberos server.
– Device Realm—The realm used for the Kerberos server. This setting is available only in the LDAP
+GSSAPI setup.
– Device Password—Type the password for the user.
Advanced Options
• Use SSL/TLS—If the LDAP server requires SSL, then select SSL/TLS.
• Require Certificate—If the LDAP server requires a certificate, then select Yes.
• Userid Attribute—Type the LDAP attribute to search for when authenticating users’ credentials. The
default value is sAMAccountName, which is common in a Windows operating system environment. For
other directories, you can type uid, cn, or a user-defined attribute. For more information, contact your
system administrator.
• Mail Attribute—Type the LDAP attribute that contains the users’ e-mail addresses. The default value is
mail.
• Fax number Attribute—Type the LDAP attribute that contains the users’ fax number. The default value
is facsimiletelephonenumber.
• Full Name Attribute—Type the LDAP attribute that contains the users’ full names. The default value is cn.
• Home Directory Attribute—Type the LDAP attribute that contains the users’ home directory. The default
value is homeDirectory.
• Group Membership Attribute—Type the LDAP attribute required for group search. The default value is
memberOf.
• Search Base—The node in the LDAP server where user accounts reside. You can type multiple search
bases, separated by commas.
Note: A search base consists of multiple attributes separated by commas, such as cn (common name),
ou (organizational unit), o (organization), c (country), and dc (domain).
• Search Timeout—Enter a value from 5 to 30 seconds or 5 to 300 seconds, depending on your printer
model.
• Follow LDAP Referrals—Search the different servers in the domain for the logged‑in user account.
Search Specific Object Classes
• person—Search the “person” object class.
• Custom Object Classes—Type the name of the custom object class to search.
Note: A maximum of three custom object classes can be searched. Type the other object class in the
other Custom Object Class field.
Using Kerberos
You can use this login method by itself or in conjunction with the LDAP+GSSAPI login method.
Notes:
• Only one Kerberos configuration file can be saved in the printer memory. This configuration file can
apply to multiple realms and Kerberos Domain Controllers.
• Uploading another configuration file or updating the Kerberos settings overwrites the saved
configuration file.
• If you want to delete a Kerberos file, then delete first the LDAP+GSSAPI login method that is using the
file.
• You must anticipate the different types of authentication requests the Kerberos server may receive, and
configure the configuration file to handle the requests.
• Kerberos relies on an external server for authentication. If the server is down, then users are not able to
access the printer using Kerberos.
• To help prevent unauthorized access, log out from the printer after each session.
4 If necessary, from the Miscellaneous Settings section, configure the following settings:
• Character Encoding—Select the character encoding used for the configuration file.
• Disable Reverse IP Lookups
5 Click Save and Verify.
Configuring manually
Note: Configuring the date and time manually disables NTP.
a From the Configure section, in the Manually Set Date and Time field, enter the appropriate date and
time.
b Select the date format, time format, and time zone.
Note: If you select (UTC+user) Custom, then specify the offset values for UTC (GMT) and DST.
Configuring NTP
a From the Network Time Protocol section, select Enable NTP, and then type the IP address or host name
of the NTP server.
b If the NTP server requires authentication, then in the Enable Authentication menu, select MD5 key.
c Depending on your printer model, either enter the key ID and password, or browse to the file containing
the NTP authentication credentials.
2 Click Save.
Securing printers 47
Notes:
• Only one Kerberos configuration file can be saved in the printer memory. This configuration file can
apply to multiple realms and Kerberos Domain Controllers.
• You must anticipate the different types of authentication requests the Kerberos server may receive, and
configure the configuration file to handle the requests.
• Uploading another configuration file or updating the Kerberos settings overwrites the saved
configuration file.
• Active Directory relies on an external server for authentication. If the server is down, then users are not
able to access the printer using Active Directory.
• To help prevent unauthorized access, log out from the printer after each session.
General Information
– Setup Name—Type a unique name for the Active Directory login method.
– Server Address—Type the IP address or the host name of the LDAP server.
– Server Port—Enter the port where queries are sent.
– Required User Input—Select the required authentication credentials when logging in to the printer.
– Use Integrated Windows Authentication—Select one of the following:
• Do not use
• Use if available—Use Windows operating system authentication credentials, if available.
• Require—Use only Windows operating system authentication credentials.
Securing printers 48
Device Credentials
– Use Active Directory Device Credentials—Use user credentials and group designations that are
pulled from the existing network comparable to other network services.
– If Use Active Directory Device Credentials is disabled, then provide the authentication credentials
used to bind the printer with the Active Directory server.
• Device Username—Type the fully qualified DN of a user registered to the Active Directory server.
• Device Realm—The Active Directory domain name.
• Device Password—Type the password for the user.
Advanced Options
– Use SSL/TLS—If the LDAP server requires SSL, then select SSL/TLS.
– Require Certificate—If the LDAP server requires a certificate, then select Yes.
– Userid Attribute—Type the LDAP attribute to search for when authenticating users’ credentials. The
default value is sAMAccountName, which is common in a Windows environment. For other
directories, you can type uid, cn, or a user-defined attribute. For more information, contact your
system administrator.
– Mail Attribute—Type the LDAP attribute that contains the users’ e-mail addresses. The default value
is mail.
– Fax number Attribute—Type the LDAP attribute that contains the users’ fax number. The default
value is facsimiletelephonenumber.
– Full Name Attribute—Type the LDAP attribute that contains the users’ full names. The default value
is cn.
– Home Directory Attribute—Type the LDAP attribute that contains the users’ home directory. The
default value is homeDirectory.
– Group Membership Attribute—Type the LDAP attribute required for group search. The default value
is memberOf.
– Search Base—The node in the LDAP server where user accounts reside. You can type multiple search
bases, separated by commas.
Note: A search base consists of multiple attributes separated by commas, such as cn (common
name), ou (organizational unit), o (organization), c (country), and dc (domain).
– Search Timeout—Enter a value from 5 to 30 seconds or 5 to 300 seconds, depending on your printer
model.
– Follow LDAP Referrals—Search the different servers in the domain for the logged‑in user account.
Notes:
• To import access controls from another group, click Import Access Controls, and then select a group.
• For more information on access controls, see “Understanding access controls” on page 50.
Notes:
• To import access controls from another group, click Import Access Controls, and then select a group.
• To delete multiple groups, select the groups, and then click Delete.
• For more information on access controls, see “Understanding access controls” on page 50.
Function Access
The following access controls modify users’ access to available printer functions:
• Access Address Book in Apps—Use Address Book from eSF applications that support it.
• Manage Shortcuts—Access the Manage Shortcuts menu, and enable the “Save as Shortcut” option
available in the Copy, E‑mail, Fax, and FTP functions.
• Modify Address Book—Enable the Search Address Book option available in the E‑mail, Fax, and FTP
functions when accessed from the printer home screen.
• Create Profiles—Create profiles for printing, copying, scanning, e‑mailing, or faxing.
• Manage Bookmarks
• Flash Drive Print—Print from a flash drive.
• Flash Drive Color Printing—Print in color from a flash drive.
• Flash Drive Scan—Scan to a flash drive.
• Copy Function—Use the copy function.
• Copy Color Printing—Copy documents in color.
• Color Dropout—Specify the color to drop during scanning and copying, and to adjust the dropout setting
for each color threshold. If a user authentication fails for a protected scan or copy job, then the Color Dropout
function is not used even if it is enabled.
• E‑mail Function—Use the e‑mail function.
• Fax Function—Use the fax function. If this function is disabled, then:
– All analog fax functions and the fax server are disabled.
– The fax icon is removed.
– No fax‑related intervention‑required messages appear on the printer display.
– The printer does not answer incoming calls or print driver faxes.
Note: The Embedded Web Server and control panel show fax‑related settings even if this function is
disabled.
• FTP Function—Scan to an FTP network folder from the printer home screen. The FTP icon is hidden by
default. To show the FTP icon on the home screen, do the following:
1 From the Embedded Web Server, click Settings > Device > Visible Home Screen Icons.
2 Select FTP.
• Release Held Faxes—Enable the Held Faxes and Release Held Faxes options on the printer home screen.
• Held Jobs Access—Enable the Held Jobs and Search Held Jobs options on the printer home screen.
Securing printers 51
• Use Profiles—Restrict access to protected profiles. If a user accesses a protected profile, then the printer
prompts for credentials to execute the profile. Enable this access control for the application that does not
specify permission to access the profiles.
• Cancel Jobs at the Device—Cancel jobs from the printer home screen.
• Change Language—Enable the Change Language option on the printer home screen.
• Internal Printing Protocol (IPP)—Allow authenticated users to configure and use the IPP port.
• Initiate Scans Remotely—Allow authenticated users to initiate remote scanning.
• B/W Print—Allow authenticated users to print in black and white.
• Color Print—Allow authenticated users to print in color.
• Network Folder ‑ Scan—Scan to a network folder.
Administrative Menus
The following access controls modify users’ access to the menus in the Embedded Web Server that are used
to manage functions, applications, and security:
• Security Menu—Manage login methods and configure other security options.
• Network/Ports Menu—Configure network connections.
• Paper Menu—Configure the paper settings.
• Reports Menu—View reports.
• Function Configuration Menus—Configure the settings for the functions that are available in the printer.
• Supplies Menu—Manage printer supplies.
• Option Card Menu—Configure the option cards installed in the printer. This control is available only when
an option card is installed.
• SE Menu—View diagnostic logs.
• Manage Shortcuts—Manage shortcuts that are available in the printer.
• Address Book—Manage the address book.
• Device Menu—Configure the printer firmware settings.
Device Management
The following access controls modify users’ access to use printer management options:
• Remote Management—Access the printer remotely.
• Firmware Updates—Update the printer firmware through any port.
• Apps Configuration—Configure the installed applications. If this control is enabled, then users can
configure, start/stop, uninstall, and view logs of applications that are installed in the printer.
• Operator Panel Lock—Configure the locking function of the printer home screen. If this control is enabled,
then users can lock and unlock the printer home screen.
• Import / Export All Settings—Import or export a printer settings file (ZIP and UCF) from the Embedded Web
Server.
• Out of Service Erase—Clear all settings, applications, and pending jobs stored in the printer memory, or
erase all data in the printer hard disk.
• Embedded Web Server Access—Control access to the Embedded Web Server. If this control is restricted,
then access to the EWS requires login.
• Cloud Services Enrollment—Control access to the enrollment of the Lexmark cloud services.
Securing printers 52
Apps
• New Apps—Use applications from the printer home screen.
• Card Copy—Use Card Copy from the printer home screen.
• Slideshow—Use Slideshow from the printer home screen.
• Change Wallpaper—Use Change Wallpaper from the printer home screen.
• Screen Saver—Use Screen Saver from the printer home screen.
• Forms and Favorites—Use Forms and Favorites from the printer home screen.
• Scan Center—Use Scan Center from the printer home screen.
Managing certificates
Certificates are used when you want the printer to establish an SSL/TLS, IPsec, or 802.1x connection and to
identify other devices on the network securely. Printers can also use these certificates for LDAP over SSL
authentication and address book lookups.
Certificate Authorities (CA) are trusted locations established on the network that are required in secure
environments. Otherwise, the default printer certificate is used to identify devices on the network.
3 Click Save.
Notes:
• For each Disable schedule entry, create an Enable schedule entry to reactivate use of the USB host
ports.
• You can create multiple schedules.
The secure reset feature requires specifying in the Embedded Web Server the effect of using the security reset
jumper, which is on the controller board.
1 From the Embedded Web Server, click Settings > Security > Miscellaneous.
2 In the Security Reset Jumper menu, select either of the following:
• Enable “Guest” access—Provide guests with full access control.
• No Effect—All protected access controls remain protected.
Warning—Potential Damage: If this option is selected, then the device is locked down and you
cannot access the security menus. To replace the device controller board and regain access to the
security menus, a service call is required.
3 If necessary, enter a value in the Minimum Password Length field.
4 To enable the password or to reveal the PIN, click Enable Password/PIN Reveal.
5 Click Save.
Securing data
USB Configuration
• USB PnP—Change the USB driver mode of the printer to improve its compatibility with a personal
computer.
• USB Scan to Local—Set whether the USB device driver enumerates as a USB Simple device (single
interface) or as a USB Composite device (multiple interfaces).
• USB Speed—Set the USB port to run at full speed and disable its high-speed capabilities.
Tray Configuration
• Tray Linking—Specify if the tray is linked automatically.
• Show Tray Insert Message—Show a message about the tray status.
• A5 Loading—Specify the page orientation when loading A5 paper size.
• Paper Prompts—Set the paper source that the user fills when a prompt to load paper appears.
• Envelope Prompts—Set the paper source that the user fills when a prompt to load envelope appears.
• Action for Prompts—Set the printer to resolve paper- or envelope-related change prompts.
• Multiple Universal Sizes—Specify if the tray has multiple universal sizes.
Securing printers 58
Reports
Print reports about printer menu settings, status, and event logs.
• Menu Settings Page
• Event Log
• Event Log Summary
Fax Configuration
• Fax Low Power Support—Specify the printer power setting when it is in fax mode.
Print Configuration
• Font Sharpening—Set a text point-size value below which the high-frequency screens are used when
printing font data. For example, if the value is 24, then all fonts sized 24 points or less use the
high‑frequency screens.
• Print Density—Adjust the toner density when printing documents.
• Copy Density—Adjust the toner density when copying documents.
Device Operations
• Quiet Mode—Set the printer to reduce the amount of noise that it makes when printing.
Note: This setting slows down the overall performance of the printer.
• Panel Menus—Set the printer to show the control panel menus.
• Safe Mode—Set the printer to safe mode.
• Minimum Copy Memory—Specify the minimum copy memory of the device.
• Clear Custom Status—Erase all custom messages.
• Clear all remotely‑installed messages—Erase all remotely installed messages.
• Automatically Display Error Screens—Set the printer to show error messages automatically.
• Honor orientation on fast path copy—Set the printer to determine if it will honor (or not) the page image
orientation on a fast path copy.
Scanner Configuration
• Scanner Manual Registration
– Print Quick Test—Print a Quick Test target page.
Note: Make sure that the margin spacing on the target page is uniform all the way around the
target. If it is not, then the printer margins may need to be reset.
– Front ADF Registration—Manually register the ADF after replacing the ADF, scanner glass, or
controller board.
– Rear ADF Registration—Manually register the Rear after replacing the ADF, scanner glass, or
controller board.
– Flatbed Registration—Manually register the scanner glass after replacing the ADF, scanner glass,
or controller board.
Securing printers 59
• Edge Erase—Set the size, in millimeters, of the no-print area around a scan job.
– ADF Edge Erase
– Flatbed Edge Erase
• ADF Deskew—Set to adjust the front side and back side of the skew angles separately of the device.
Note: The maximum amount of skew correction that can be applied to media of Letter/A4 width is 5%.
• Disable Scanner—Disable the scanner if it is not working properly.
• Tiff Byte Order—Set the byte order of a TIFF-formatted scan output.
• Exact Tiff Rows Per Strip—Set the RowsPerStrip tag value of a TIFF-formatted scan output.
• Scanner Glass Cleaning Threshold—Specify the number of scans before a user is prompted to clean
the scanner glass.
Note: The range of the number of scans is from 1000 to 3000.
4 Click Save.
Note: By default, on selecting Sanitize all information on nonvolatile memory, the above three settings
get selected automatically.
4 Click Start.
Note: Click Reset to change the configuration.
Statement of Volatility
Type of memory Description
Volatile memory The printer uses standard random access memory (RAM)
to buffer temporarily user data during simple print and
copy jobs.
Nonvolatile memory The printer may use two forms of non-volatile memory:
EEPROM and NAND (flash memory). Both types store the
operating system, printer settings, and network
information. They also store scanner and bookmark
settings and embedded solutions.
Hard disk storage drive Some printers may have a hard disk drive installed. The
printer hard disk is designed for printer-specific
functionality. The hard disk lets the printer retain buffered
user data from complex print jobs, form data, and font
data.
Intelligent storage drive (ISD) Some printers may have an ISD installed. ISD uses non-
volatile flash memory to store user data from complex
print jobs, form data, and font data.
Securing printers 61
Erase the content of any installed printer memory in the following circumstances:
• The printer is decommissioned.
• The printer hard disk or ISD is replaced.
• The printer is moved to a different department or location.
• The printer is serviced by someone from outside your organization.
• The printer is removed from your premises for service.
• The printer is sold to another organization.
Note: To dispose a storage drive, follow the policies and procedures of your organization.
Troubleshooting 62
Troubleshooting
Login troubleshooting
Make sure that the IP address or host name of the KDC is correct
Make sure that the server and firewall settings are configured to allow communication between the
printer and the KDC server on port 88
LDAP troubleshooting
Make sure that the server and firewall settings are configured to allow communication between the
printer and the LDAP server on port 389 and port 636
The default ports are port 389 and port 636.
If reverse DNS lookup is not used in your network, then disable it in the Kerberos settings
1 From the Embedded Web Server, click Settings > Security.
2 From the Network Accounts section, click Kerberos.
3 From the Miscellaneous Settings section, select Disable Reverse IP Lookups.
4 Click Save and Verify.
If the LDAP server requires SSL, then enable SSL for LDAP lookups
Some solutions that provide authentication may require you to enable SSL for LDAP lookups. For more
information, see the administrator’s guide for the solution.
Narrow the LDAP search base to the lowest possible scope that includes all necessary users
Make sure that all LDAP attributes that are being searched for are correct
Troubleshooting 64
Scanning problems
If the printer and destination are in different domains, then make sure that the domain information is
specified
From the Embedded Web Server, access the configuration page for the application, and then enter the
appropriate domain information.
Make sure that the user name and password are correct
Make sure that the user has permission to save scans to the destination
1 From the Embedded Web Server, access the configuration page for the application.
2 From the Scan Destination section, select the destination to configure.
3 From the Authentication Options section, select the correct authentication type, and if necessary, type
the correct authentication credentials.
4 Apply the changes.
Make sure that a file with the default file name does not exist in the destination
Remove the old file from the destination, or configure the application to:
• Allow users to type a file name.
• Append the time stamp.
• Overwrite the existing file.
Configure the firewall to allow communication with the subnet in which the printer is located
For more information, contact your system administrator.
Make sure that the printer and destination have the same subnet
For more information, contact your system administrator.
Make sure that the LDAP settings are configured properly in your printer setup and in the setup dialog
For more information, contact your system administrator.
License error
Contact your Lexmark representative
Faxing problems
Make sure that the sender used the correct fax number
3 Click Save.
If using a distinctive ring service, then confirm that the printer is configured properly to pick up the correct
ring pattern
1 From the Embedded Web Server, click Settings > Fax > Fax Setup.
2 From the Fax Receive Settings menu, click Admin Controls, and then select the Answer On setting that
matches the phone number intended for faxes.
3 Click Save.
Make sure that no other phone number is competing with the printer
1 From the Embedded Web Server, click Settings > Fax > Fax Setup.
2 From the Fax Receive Settings menu, change the “Rings to Answer” value.
3 Click Save.
Make sure that the printer is not configured for Fax Server mode
1 From the Embedded Web Server, click Settings > Fax.
2 Make sure that Fax is selected in Fax Mode.
Make sure that you have entered a station ID and station number
1 From the Embedded Web Server, click Settings > Fax > Fax Setup.
2 From the General Fax Settings menu, make sure that the Fax Name and Fax Number fields are not
blank.
Troubleshooting 68
3 Click Save.
Networking problems
Notices
Edition notice
January 2023
The following paragraph does not apply to any country where such provisions are inconsistent with local
law: LEXMARK INTERNATIONAL, INC., PROVIDES THIS PUBLICATION “AS IS” WITHOUT WARRANTY OF ANY
KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of
express or implied warranties in certain transactions; therefore, this statement may not apply to you.
This publication could include technical inaccuracies or typographical errors. Changes are periodically made
to the information herein; these changes will be incorporated in later editions. Improvements or changes in the
products or the programs described may be made at any time.
References in this publication to products, programs, or services do not imply that the manufacturer intends to
make these available in all countries in which it operates. Any reference to a product, program, or service is
not intended to state or imply that only that product, program, or service may be used. Any functionally
equivalent product, program, or service that does not infringe any existing intellectual property right may be
used instead. Evaluation and verification of operation in conjunction with other products, programs, or services,
except those expressly designated by the manufacturer, are the user’s responsibility.
For Lexmark technical support, go to http://support.lexmark.com.
For information on Lexmark's privacy policy governing the use of this product, go to
www.lexmark.com/privacy.
For information on supplies and downloads, go to www.lexmark.com.
© 2016 Lexmark International, Inc.
All rights reserved.
Trademarks
Lexmark and the Lexmark logo are trademarks or registered trademarks of Lexmark International, Inc. in the
United States and/or other countries.
Google Chrome is a trademark of Google LLC.
Microsoft, Internet Explorer, Microsoft Edge, and Windows are trademarks of the Microsoft group of companies.
Safari is a trademark of Apple Inc.
Notices 70
GifEncoder
GifEncoder - writes out an image as a GIF. Transparency handling and variable bit size courtesy of Jack Palevich.
Copyright (C) 1996 by Jef Poskanzer * <jef@acme.com>. All rights reserved. Redistribution and use in source
and binary forms, with or without modification, are permitted provided that the following conditions are met: 1.
Redistributions of source code must retain the above copyright notice, this list of conditions and the following
disclaimer. 2. Redistributions in binary form must reproduce the above copyright notice, this list of conditions
and the following disclaimer in the documentation and/or other materials provided with the distribution. THIS
SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND ANY EXPRESS OR IMPLIED
WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND
FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR
CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Visit the ACME Labs Java page for up-to-date versions of
this and other fine Java utilities: http://www.acme.com/java/
ZXing 1.7
This project consists of contributions from several people, recognized here for convenience, in alphabetical
order.
Agustín Delgado (Servinform S.A.), Aitor Almeida (University of Deusto), Alasdair Mackintosh (Google),
Alexander Martin (Haase & Martin GmbH), Andreas Pillath, Andrew Walbran (Google), Andrey Sitnik,
Androida.hu / http://www.androida.hu/, Antonio Manuel Benjumea (Servinform S.A.), Brian Brown (Google),
Chang Hyun Park, Christian Brunschen (Google), crowdin.net, Daniel Switkin (Google), Dave MacLachlan
(Google), David Phillip Oster (Google), David Albert (Bug Labs), David Olivier, Diego Pierotto, drejc83, Eduardo
Castillejo (University of Deusto), Emanuele Aina, Eric Kobrin (Velocitude), Erik Barbara, Fred Lin (Anobiit),
gcstang, Hannes Erven, hypest (Barcorama project), Isaac Potoczny-Jones, Jeff Breidenbach (Google), John
Connolly (Bug Labs), Jonas Petersson (Prisjakt), Joseph Wain (Google), Juho Mikkonen, jwicks, Kevin O'Sullivan
(SITA), Kevin Xue (NetDragon Websoft Inc., China), Lachezar Dobrev, Luiz Silva, Luka Finžgar, Marcelo, Mateusz
Jędrasik, Matrix44, Matthew Schulkind (Google), Matt York (LifeMarks), Mohamad Fairol, Morgan Courbet,
Nikolaos Ftylitakis, Pablo Orduña (University of Deusto), Paul Hackenberger, Ralf Kistner, Randy Shen (Acer),
Rasmus Schrøder Sørensen, Richard Hřivňák, Romain Pechayre, Roman Nurik (Google), Ryan Alford, Sanford
Squires, Sean Owen (Google), Shiyuan Guo / 郭世元, Simon Flannery (Ericsson), Steven Parkes, Suraj Supekar,
Sven Klinkhamer, Thomas Gerbet, Vince Francis (LifeMarks), Wolfgang Jung, Yakov Okshtein (Google)
"License" shall mean the terms and conditions for use, reproduction, and distribution as defined by Sections
1 through 9 of this document.
"Licensor" shall mean the copyright owner or entity authorized by the copyright owner that is granting the
License.
"Legal Entity" shall mean the union of the acting entity and all other entities that control, are controlled by,
or are under common control with that entity. For the purposes of this definition, "control" means (i) the
power, direct or indirect, to cause the direction or management of such entity, whether by contract or
otherwise, or (ii) ownership of fifty percent (50%) or more of the outstanding shares, or (iii) beneficial
ownership of such entity.
"You" (or "Your") shall mean an individual or Legal Entity exercising permissions granted by this License.
"Source" form shall mean the preferred form for making modifications, including but not limited to software
source code, documentation source, and configuration files.
"Object" form shall mean any form resulting from mechanical transformation or translation of a Source form,
including but not limited to compiled object code, generated documentation, and conversions to other
media types.
"Work" shall mean the work of authorship, whether in Source or Object form, made available under the
License, as indicated by a copyright notice that is included in or attached to the work (an example is provided
in the Appendix below).
"Derivative Works" shall mean any work, whether in Source or Object form, that is based on (or derived from)
the Work and for which the editorial revisions, annotations, elaborations, or other modifications represent,
as a whole, an original work of authorship. For the purposes of this License, Derivative Works shall not
include works that remain separable from, or merely link (or bind by name) to the interfaces of, the Work
and Derivative Works thereof.
"Contribution" shall mean any work of authorship, including the original version of the Work and any
modifications or additions to that Work or Derivative Works thereof, that is intentionally submitted to Licensor
for inclusion in the Work by the copyright owner or by an individual or Legal Entity authorized to submit on
behalf of the copyright owner. For the purposes of this definition, "submitted" means any form of electronic,
verbal, or written communication sent to the Licensor or its representatives, including but not limited to
communication on electronic mailing lists, source code control systems, and issue tracking systems that are
managed by, or on behalf of, the Licensor for the purpose of discussing and improving the Work, but
excluding communication that is conspicuously marked or otherwise designated in writing by the copyright
owner as "Not a Contribution."
"Contributor" shall mean Licensor and any individual or Legal Entity on behalf of whom a Contribution has
been received by Licensor and subsequently incorporated within the Work.
2 Grant of Copyright License. Subject to the terms and conditions of this License, each Contributor hereby
grants to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license
to reproduce, prepare Derivative Works of, publicly display, publicly perform, sublicense, and distribute the
Work and such Derivative Works in Source or Object form.
3 Grant of Patent License. Subject to the terms and conditions of this License, each Contributor hereby grants
to You a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable (except as stated in this
section) patent license to make, have made, use, offer to sell, sell, import, and otherwise transfer the Work,
where such license applies only to those patent claims licensable by such Contributor that are necessarily
infringed by their Contribution(s) alone or by combination of their Contribution(s) with the Work to which
such Contribution(s) was submitted. If You institute patent litigation against any entity (including a cross-
claim or counterclaim in a lawsuit) alleging that the Work or a Contribution incorporated within the Work
constitutes direct or contributory patent infringement, then any patent licenses granted to You under this
License for that Work shall terminate as of the date such litigation is filed.
Notices 72
4 Redistribution. You may reproduce and distribute copies of the Work or Derivative Works thereof in any
medium, with or without modifications, and in Source or Object form, provided that You meet the following
conditions:
a (a) You must give any other recipients of the Work or Derivative Works a copy of this License; and
b (b) You must cause any modified files to carry prominent notices stating that You changed the files; and
c (c) You must retain, in the Source form of any Derivative Works that You distribute, all copyright, patent,
trademark, and attribution notices from the Source form of the Work, excluding those notices that do not
pertain to any part of the Derivative Works; and
d (d) If the Work includes a "NOTICE" text file as part of its distribution, then any Derivative Works that You
distribute must include a readable copy of the attribution notices contained within such NOTICE file,
excluding those notices that do not pertain to any part of the Derivative Works, in at least one of the
following places: within a NOTICE text file distributed as part of the Derivative Works; within the Source
form or documentation, if provided along with the Derivative Works; or, within a display generated by
the Derivative Works, if and wherever such third-party notices normally appear. The contents of the
NOTICE file are for informational purposes only and do not modify the License. You may add Your own
attribution notices within Derivative Works that You distribute, alongside or as an addendum to the
NOTICE text from the Work, provided that such additional attribution notices cannot be construed as
modifying the License.
You may add Your own copyright statement to Your modifications and may provide additional or different
license terms and conditions for use, reproduction, or distribution of Your modifications, or for any such
Derivative Works as a whole, provided Your use, reproduction, and distribution of the Work otherwise
complies with the conditions stated in this License.
5 Submission of Contributions. Unless You explicitly state otherwise, any Contribution intentionally submitted
for inclusion in the Work by You to the Licensor shall be under the terms and conditions of this License,
without any additional terms or conditions. Notwithstanding the above, nothing herein shall supersede or
modify the terms of any separate license agreement you may have executed with Licensor regarding such
Contributions.
6 Trademarks. This License does not grant permission to use the trade names, trademarks, service marks, or
product names of the Licensor, except as required for reasonable and customary use in describing the origin
of the Work and reproducing the content of the NOTICE file.
7 Disclaimer of Warranty. Unless required by applicable law or agreed to in writing, Licensor provides the
Work (and each Contributor provides its Contributions) on an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or
conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE.
You are solely responsible for determining the appropriateness of using or redistributing the Work and
assume any risks associated with Your exercise of permissions under this License.
8 Limitation of Liability. In no event and under no legal theory, whether in tort (including negligence), contract,
or otherwise, unless required by applicable law (such as deliberate and grossly negligent acts) or agreed
to in writing, shall any Contributor be liable to You for damages, including any direct, indirect, special,
incidental, or consequential damages of any character arising as a result of this License or out of the use
or inability to use the Work (including but not limited to damages for loss of goodwill, work stoppage,
computer failure or malfunction, or any and all other commercial damages or losses), even if such Contributor
has been advised of the possibility of such damages.
9 Accepting Warranty or Additional Liability. While redistributing the Work or Derivative Works thereof, You
may choose to offer, and charge a fee for, acceptance of support, warranty, indemnity, or other liability
obligations and/or rights consistent with this License. However, in accepting such obligations, You may act
only on Your own behalf and on Your sole responsibility, not on behalf of any other Contributor, and only if
You agree to indemnify, defend, and hold each Contributor harmless for any liability incurred by, or claims
asserted against, such Contributor by reason of your accepting any such warranty or additional liability.
Notices 73
Index
Numerics configuring fax server scan creating local accounts
802.1x authentication 37 settings 33 password 41
configuring flash drive PIN 41
settings 22 user name 41
A configuring FTP settings 21 user name and password 41
access controls 50 configuring general fax customizing
accessing the Embedded Web settings 28, 32 home screen 13
Server 9 configuring HTTP/FTP customizing home screen 13
Active Directory settings 34
creating groups 49 configuring intelligent storage
creating login method 47
D
drive 60 date and time settings
deleting groups 49 configuring IP Security
deleting login method 47 configuring manually 46
settings 36 configuring NTP 46
editing groups 49 configuring printer certificate
editing login method 47 deleting a certificate 53
defaults 52 deleting Active Directory
active network adapter configuring security audit log
selecting 34 groups 49
settings 39 deleting an Active Directory login
adding contacts 15 configuring SNMP traps 39
adding groups 15 method 47
configuring SNMP version 1 deleting contacts 15
settings 38 deleting groups 15
C configuring SNMP version 2c deleting LDAP groups 49
cannot scan to selected settings 38 deleting LDAP login method 45
destination 64 configuring SNMP version 3 deleting LDAP+GSSAPI
card is locked out 62 settings 38 groups 49
certificate configuring speaker settings 32 deleting LDAP+GSSAPI login
deleting 53 configuring supply method 45
downloading 53 notifications 13 deleting local account groups 42
viewing 53 connecting to a wireless deleting local accounts
certificate error 63 network 35 password 41
certificates contacts PIN 41
installing 53 adding 15 user name 41
installing manually 53 deleting 15 user name and password 41
change history 4 editing 15 digital certificates
checking the status of parts and controlling access 50 installing 53
supplies 12 copy settings installing manually 53
confidential printing configuring 16 domain certificate error 63
configuring 55 creating a printer certificate 53 domain controller certificate not
configuring creating a shortcut 25 installed 63
TCP/IP port access settings 36 creating an Active Directory login downloading a certificate 53
configuring copy settings 16 method 47
configuring e‑mail settings 17 creating groups
configuring fax cover page 31 local accounts 42
E
configuring fax log settings 31 creating Kerberos login editing Active Directory
configuring fax receive method 45 groups 49
settings 30 creating LDAP login method 43 editing an Active Directory login
configuring fax send settings 29 creating LDAP+GSSAPI login method 47
configuring fax server e‑mail method 43 editing contacts 15
settings 32 editing groups 15
editing LDAP groups 49
Index 75
editing LDAP+GSSAPI groups 49 fax send settings KDC is not responding within the
editing local account groups 42 configuring 29 required time 63
editing local accounts fax server e‑mail settings Kerberos
password 41 configuring 32 creating login method 45
PIN 41 fax server scan settings
user name 41 configuring 33 L
user name and password 41 firmware LDAP 42
Embedded Web Server updating 40 creating groups 49
accessing 9 flash drive settings creating login method 43
checking the status of parts 12 configuring 22 deleting groups 49
checking the status of FTP settings deleting login method 45
supplies 12 configuring 21 editing groups 49
parts 10 LDAP and GSSAPI 42
enabling print permission 56 G LDAP lookups fail 63
enabling solutions LDAP general fax settings LDAP+GSSAPI
settings 55 configuring 28, 32 creating groups 49
erasing printer memory 59, 60 generating reports and logs 12 creating login method 43
erasing printer storage drive 59 groups deleting groups 49
error occurs when opening a adding 15 deleting login method 45
secure PDF 65 deleting 15 editing groups 49
e‑mail destination editing 15 license error 65
adding 26 GSSAPI local accounts
configuring from the Embedded understanding 42 creating groups 42
Web Server 26 guest account users creating password 41
deleting 26 restricting access 41 creating PIN 41
editing 26 creating user name 41
e‑mail settings creating user name and
configuring 17
H
hard disk password 41
erasing 59 deleting groups 42
F hard disk storage drive 60 deleting password 41
failure to receive fax from all helper text 11 deleting PIN 41
senders 65 HTTP/FTP settings deleting user name 41
failure to receive fax from one configuring 34 deleting user name and
sender 65 HTTPS password 41
failure to send fax to one printer management 38 editing groups 42
destination 66 editing password 41
failure to send to all fax editing PIN 41
destinations 67
I editing user name and
fax cover page installing certificates password 41
configuring 31 automatically 53 login method
fax destination installing certificates manually 53 creating Active Directory 47
adding 26 intelligent storage drive 60 creating LDAP 43
configuring from the Embedded configuring 60 creating LDAP+GSAAPI 43
Web Server 26 erasing 59 deleting Active Directory 47
deleting 26 IP Security deleting LDAP 45
editing 26 configuring settings 36 deleting LDAP+GSSAPI 45
fax log settings IPsec 36 editing Active Directory 47
configuring 31 login restrictions
fax mode K setting 54
setting 28 KDC and MFP clocks out of logs
fax receive settings sync 62 generating 12
configuring 30
Index 76
M R shortcuts
managing security audit log remote printer destination creating 25
settings 39 adding 26 SNMP traps
MFP clock out of sync 62 configuring from the Embedded configuring 39
multifunction products 6 Web Server 26 SNMP version 1 settings
deleting 26 configuring 38
editing 26 SNMP version 2c settings
N configuring 38
network destination reports
generating 12 SNMP version 3 settings
adding 25 configuring 38
configuring from the Embedded reset jumper 56
restoring factory default solutions LDAP settings
Web Server 25 enabling 55
deleting 25 settings 60
restricted server list speaker settings
editing 25 configuring 32
Network Time Protocol setting 38
restricting statement of volatility 60
configuring 46 storage drive
nonvolatile memory guest account users access 41
restricting guest account erasing 59
erasing 59 supplies
non‑volatile memory 60 users 41
checking status 12
checking, using the Embedded
O S Web Server 12
overview 6 scheduling access to USB supply notifications
devices 54 configuring 13
secured applications or functions supported printers 6
P showing on the home
parts supported web browsers 9
screen 56
checking status 12 securing printer data 60
checking, using the Embedded security
T
Web Server 12 802.1x authentication 37 TCP/IP port access
parts of the Embedded Web confidential printing 55 configuring 36
Server 10 reset jumper on controller troubleshooting
print permission board 56 cannot scan to selected
enabling 56 security advisory 36 destination 64
printer certificate security audit logs certificate error 63
configuring defaults 52 configuring 39 domain certificate error 63
creating 53 deleting 39 domain controller certificate not
printer clock out of sync 62 e‑mail notification 39 installed 63
printer management managing 39 error occurs when opening a
using HTTPS 38 viewing or saving 39 secure PDF 65
printer not communicating on the security certificates failure to receive fax from all
network 68 installing 53 senders 65
printer settings installing manually 53 failure to receive fax from one
configuring 57 security reset jumper sender 65
maintaining 57 enabling 56 failure to send fax to one
restoring to factory defaults 60 selecting the active network destination 66
printers 6 adapter 34 failure to send to all fax
protected features servers destinations 67
showing on the home restricting 38 KDC and MFP clocks out of
screen 56 setting fax mode 28 sync 62
setting login restrictions 54 KDC is not responding within
setting the restricted server the required time 63
list 38 LDAP lookups fail 63
license error 65
Index 77
U
unexpected logout 62
updating firmware 40
USB devices
scheduling access 54
USB ports
disabling 54
enabling 54
user cannot access applications
or functions 62
user is locked out 62
user is logged out
automatically 62
V
viewing a certificate 53
volatile memory 60
erasing 59
W
web browsers
supported 9
wireless network
connecting 35